$ rpki-client -vvvf rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft File: 412965964A4E12BD59BDF602A054F3394E99DC57.mft (raw, json) Hash identifier: mpKSEyJtYTr6E/uXpZZENDWBGm9XHMrV2F14welFu/A= Subject key identifier: E3:DE:DE:3C:C9:E5:67:AB:AD:9E:53:1E:A7:F1:18:BC:5A:E0:41:78 Authority key identifier: 41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57 Certificate issuer: /CN=412965964A4E12BD59BDF602A054F3394E99DC57 Certificate serial: 0FCD2240C90A3241B739E8232E6370925C203952 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft Manifest number: BC Signing time: Mon 21 Sep 2026 12:01:11 +0000 Manifest this update: Mon 21 Sep 2026 11:56:11 +0000 Manifest next update: Tue 22 Sep 2026 14:04:11 +0000 Files and hashes: 1: 412965964A4E12BD59BDF602A054F3394E99DC57.crl (hash: nTVQLv/s+tbKzMs6NyGZzwsMg3SuxesRRAmRLPoFrKY=) 2: 3130332e382e3233382e302f32342d3234203d3e20313332363334.roa (hash: PR4TqG8Gt/NDoejWkXR5KiYWrPCc3WE35fh/Jxbvano=) 3: 3130332e362e33342e302f32342d3234203d3e20313332363334.roa (hash: s2Tpgag7FxdnRddbkWVhsKOC3K9zk4kizsUSEDbaWVQ=) 4: 3130332e31382e3131372e302f32342d3234203d3e20313332363334.roa (hash: TwoAdTsM3NEVv7qQwQrrGzyUs0c/Mt2dxvgYNM1lek8=) 5: 3130332e31362e34382e302f32332d3234203d3e20313332363334.roa (hash: uLq3gfPOGWF6ZWj1F9WMmGzvCujMeECGwqgAQGV2Nv4=) 6: 3130332e3232352e3234322e302f32342d3234203d3e20313332363334.roa (hash: SenSDJoyF/7+T+Cte5ij0s1hRLf2P72+k6wabdM015Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.crl rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:cd:22:40:c9:0a:32:41:b7:39:e8:23:2e:63:70:92:5c:20:39:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=412965964A4E12BD59BDF602A054F3394E99DC57 Validity Not Before: Sep 21 11:56:11 2026 GMT Not After : Sep 22 14:04:11 2026 GMT Subject: CN=E3DEDE3CC9E567ABAD9E531EA7F118BC5AE04178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:33:97:3c:65:91:6b:68:63:1d:3e:b7:47:b0: 56:b1:55:d9:b8:3b:83:74:73:9d:6c:ab:56:dc:ad: 1b:78:62:19:ea:0d:4a:76:2f:46:e5:42:a6:bd:59: d7:4d:b2:b8:17:87:b2:d9:f5:a9:d9:bb:a5:32:74: 0d:af:ae:3e:25:26:ee:5a:3b:64:b5:fc:9d:bc:48: 40:f3:58:9b:0b:3a:f1:13:93:b5:28:36:03:aa:c0: 17:5c:80:28:be:f7:c9:4a:1f:ef:8b:b0:a5:ad:75: f4:20:8c:be:05:23:f4:1d:19:79:f4:31:16:65:d5: 62:37:13:89:6f:36:a2:2a:2d:54:c5:ba:bf:d2:6c: 86:69:87:e5:4f:7b:37:40:59:a9:52:d3:4a:af:d8: 18:7e:c4:2e:e5:d9:fd:81:4f:9d:f6:4e:3e:55:ad: 5a:9d:69:e0:40:8c:10:09:e4:37:b3:a9:2a:cb:36: a5:75:e0:a1:ed:26:97:d5:da:c4:61:09:ef:7a:1b: 05:40:16:87:fd:5b:52:eb:35:19:d5:0e:e2:f8:1d: f5:eb:5a:4a:48:3f:a3:66:c9:bb:d7:24:77:c1:a3: 3c:6c:ed:b8:56:40:ce:6a:33:39:bc:f6:23:ce:58: 3f:a7:cb:ca:83:07:42:b8:59:99:0d:6c:ea:a7:30: 54:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:DE:DE:3C:C9:E5:67:AB:AD:9E:53:1E:A7:F1:18:BC:5A:E0:41:78 X509v3 Authority Key Identifier: keyid:41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b0:94:58:4f:df:e1:6a:07:36:6e:a1:e2:30:d6:06:fd:ab: 55:01:09:73:8f:8a:97:46:a5:b3:3d:6e:a2:28:df:84:32:51: e6:27:bb:1d:a8:4c:32:e1:6f:7d:eb:60:3f:8d:7e:30:d4:55: 95:c3:f9:84:20:8a:ee:4f:e0:df:c7:69:0c:ef:cf:83:39:be: ba:9e:89:a5:db:1d:98:96:fe:11:6c:2f:93:88:ee:64:bc:36: 63:d1:97:3e:05:49:a7:f9:3b:36:f5:41:a8:59:11:c1:48:fb: 1e:f2:61:71:1f:9c:4b:06:93:cb:de:60:ca:66:1d:1c:fb:10: fb:f3:54:90:04:b4:f0:58:aa:c0:5b:22:5d:45:2a:85:d6:1c: da:a0:86:ad:70:d7:dc:c6:fa:0f:80:c7:ac:b6:f2:4c:18:6b: 06:7a:a3:07:da:19:89:ad:3e:9d:94:f2:21:8e:6f:5e:91:be: 6e:c0:9c:5f:82:99:bb:1f:42:40:37:e2:92:82:0f:d7:8b:69: a9:c6:4d:0b:01:08:52:7c:9c:55:d9:87:cf:ac:4c:69:e6:33: e3:4d:2b:c5:c1:be:d9:c2:02:71:2d:41:66:c5:dc:83:67:88: d8:9f:20:6d:32:ab:97:29:24:11:b0:0b:dd:a0:d8:48:93:b4: 31:e3:1a:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD80iQMkKMkG3OegjLmNwklwgOVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDEyOTY1OTY0QTRFMTJCRDU5QkRGNjAyQTA1NEYzMzk0 RTk5REM1NzAeFw0yNjA5MjExMTU2MTFaFw0yNjA5MjIxNDA0MTFaMDMxMTAvBgNV BAMTKEUzREVERTNDQzlFNTY3QUJBRDlFNTMxRUE3RjExOEJDNUFFMDQxNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4M5c8ZZFraGMdPrdHsFaxVdm4 O4N0c51sq1bcrRt4YhnqDUp2L0blQqa9WddNsrgXh7LZ9anZu6UydA2vrj4lJu5a O2S1/J28SEDzWJsLOvETk7UoNgOqwBdcgCi+98lKH++LsKWtdfQgjL4FI/QdGXn0 MRZl1WI3E4lvNqIqLVTFur/SbIZph+VPezdAWalS00qv2Bh+xC7l2f2BT532Tj5V rVqdaeBAjBAJ5DezqSrLNqV14KHtJpfV2sRhCe96GwVAFof9W1LrNRnVDuL4HfXr WkpIP6NmybvXJHfBozxs7bhWQM5qMzm89iPOWD+ny8qDB0K4WZkNbOqnMFQfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU497ePMnlZ6utnlMep/EYvFrgQXgwHwYDVR0j BBgwFoAUQSlllkpOEr1ZvfYCoFTzOU6Z3FcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjBmN2JlMDYtOTY3Mi00NjQxLTk3YmQtOWJmZGY5NTVkZTE3LzAvNDEyOTY1OTY0 QTRFMTJCRDU5QkRGNjAyQTA1NEYzMzk0RTk5REM1Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MTI5NjU5NjRBNEUxMkJENTlCREY2MDJBMDU0RjMzOTRFOTlE QzU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjBmN2JlMDYtOTY3Mi00NjQxLTk3 YmQtOWJmZGY5NTVkZTE3LzAvNDEyOTY1OTY0QTRFMTJCRDU5QkRGNjAyQTA1NEYz Mzk0RTk5REM1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6wlFhP3+FqBzZuoeIw1gb9q1UBCXOPipdG pbM9bqIo34QyUeYnux2oTDLhb33rYD+NfjDUVZXD+YQgiu5P4N/HaQzvz4M5vrqe iaXbHZiW/hFsL5OI7mS8NmPRlz4FSaf5Ozb1QahZEcFI+x7yYXEfnEsGk8veYMpm HRz7EPvzVJAEtPBYqsBbIl1FKoXWHNqghq1w19zG+g+Ax6y28kwYawZ6owfaGYmt Pp2U8iGOb16Rvm7AnF+CmbsfQkA34pKCD9eLaanGTQsBCFJ8nFXZh8+sTGnmM+NN K8XBvtnCAnEtQWbF3INniNifIG0yq5cpJBGwC92g2EiTtDHjGig= -----END CERTIFICATE-----Generated at Mon Sep 21 17:01:24 2026 by rpki-client